Threat Intelligence for Every Defender
ThreatPodium Match Legitimate Resource Name or Location (T1036.005) is a masquerading technique where adversaries rename malicious executables, scripts, or other resource…
Report Date: 2026-07-22
New KEVs: 7 — unchanged vs last weekRansomware Victims: 164 ▼ -48 vs last week
7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Microsoft products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Qilin. Ransomware activity is moderate with 164 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.
Modify Registry (T1112) describes adversary interactions with the Windows Registry to achieve defense evasion, persistence, or execution. Attackers use regis…
Report Date: 2026-07-21
New KEVs: 7 — unchanged vs last weekRansomware Victims: 160 ▼ -45 vs last week
7 vulnerabilities were added to the CISA Known Exploited Vulnerabilities catalog this period. Fortinet products show the strongest concentration of risk signals this week. Threat intelligence sources this period reference Qilin. Ransomware activity is moderate with 160 new victims posted to leak sites over the last 7 days, with Qilin posting the most victims.
File and Directory Discovery (T1083) refers to adversaries actively enumerating the file system — listing directories, searching for specific file types, and…